1/11 



, TARGET SERVICE 






SESSION SECURITY . 


o 
-en 


re 


TRANSPORT 




o 






■ ■■■ 

u. 



4 VO 




OS 



2/11 



Alice Bd> 

ChocEe a Gw 0, . . . J »• — 1 

^ sT 



Oompule * *- {cf')° Confute k (S°)* 



Figure 2 



ABcB Bob 

ChocBE a (Sjz 0, ...,r — 1 

S/ ^ocBC AeKil,...,r— 1 

CxEste sbSb 



Create aCj* 



Figure 



3 



3/11 

Alice Bob 

Chcxise suitable DH gioup G 
Chcxise a 0, . . . , r — 1 

©Definition of G, ff" 
^ 
Verify G is a ^id DH group 
Choose 6 6r 0,...,r — 1 
Create siGb 

sigb 



Veiify siGb 
Create sig>i 

(?) > 

k 4- (g*)" ^ Verify SIG^ 

k 4r- (sry 



Figure 4 



Alioe Bob 

Choose smtaUe DH group G 
Choose a 6r O5 . . . 3^ — 1 

Defimtion ofG^g^ 



Veiify C 39 a vaBd DH group 
Choose 6Ghc O3. jr — 1 
Choose JlSTjs; Create siGb 



VeAfy justbi Verify siGb 
Choose 31SBTa\ Create eiga 



JUSTjt, SIGa 



(g*)" Verify 3UST>i; Verify siG^i 



Figure 5 



4/11 

Alice Bob 

ChoGse suitable DH grmp G 
ChoGse a Eie O3- - -jr — 1 

Defimtion off sT 

Veiify G is a valid DH group 
Choose 6 67^ 0, . . . — 1 
Chcx3se JUSTs; Cxeate siGjb 

< — (D 



Verify JUSTjs; Verify SiGs 
Choose JUST^; Create siG^t 

JlIST>i3 SPI>|3 SIG>i 



-¥ 



k <- {g^y Verify JUST^; Verify SIG^ 



Figure 6 



AlicB Bob 

Cboose ADVjB and QECVji 
Chocse suitable DH gioi^ G 
GfaoQBe a 0, . . . — 1 

Defiiddanof G, 
^ ADVb, QRy^ 

Vfeiify*G is a valid DH group 
Chotse 6 0, . . . jir — 1 
Gfaoose JUSTb and auva 
Cxeate sigb 

g*, JUSTb, ADV>l, SPlB, SIGb^^^ 

i — (¥) 

Vejriiy JUSTb; Verify siGs 
ClKKBe JUST^i Gkeate SiG^ 

JUSTxj SPIa, SIGa 

hi 



(061° Verify 3VSTa\ Veiify SIG^ 



Figure 7 




Alioe Bob 

Choose ADVs and qbxa 
Choose suitable DH group G 
Chorae fl Er 0, . . . ,r — 1 
Choose CSi. 

Definition of G, g°, CSz., 
advb, QBy>i 

Venfy^G is a vaBd DH group 
Choose GS E CSz, 
Choose ft 6r 0,. . .,r — 1 
Choose jvstb and adva 
Create SIGjb 

SIGfi 



i Cfe 

Verify C3S g CTx, ^ 

Verify juSTjb; Verify siGs 

Choose Ji^ii; Create sig^ 

_ 3UST^, SPlA, siga 

(?) — > 

k <- i^y Verify JUST^: Vferify SIG^ 

k 4r- (gr«)6 



Figure 8 



6/11 



Alice Bob 

GboosB ADVfi and qk^a 
CboosB sBOtable DH group G 
ChoosB a &fi 0, ... I r — 1 
CboosB GSx 

D^nitiosi of G, g^^ cs^t 



Veni^ G 5s a vaBd DH gro^p 
CboosB cs E cat 
Cboose ft 0, - - - , r — 1 
Choose JUST^ and adv^ 
Create siGjs 

g*, cs, JUSTjB. ADVj4, SPIb, 
SIGb 

Verify ca e cSx ^""^ 
Vearifer jusr^i siGs 
Cboose Jusrj4; Create aiGj4 

^ 

« T- J Verify 3UsrA\ Vferify aiG^ 

Store secBire diannetl k 4— (g**)^ 

information Store secure channel 

informalSon 



Figure 9 



7/11 



Client ID 



LookUi 



i: 



SPI 



.41 



SP! 



m 



m 





State 




m/c 



'44 




c-» 



/2 



MAC •-Jif^ 



SPI 


c 


m 


MAC 




9 



Figure 10 



-40 



SPI 



Lookup -K ^^ 




D 



53 



SPI 


c 


m 


MAC 



C-l 

54 



MAC 

A. 




=7 



State 




55 






m/c 




m 





Figure 1 1 



'50 



m m 

10/11 




11/11 




ON 



&3 

H CO 



o 



o 



1^ 

CO 
CO 




ON 



CO 



ON 



0) p< O ^ CO 



